On the Mark Ziff Davis Enterprise
Advertisement
Advertisement
Wednesday, August 06, 2008 6:21 PM/EST

Electronic Privacy Rights Gone in a Millisecond

The Electronic Frontier Foundation, as it so often does, has again stuck its nose in a beehive of controversy. The angry buzz this time is coming from the Motion Picture Association of America, which paid $15,000 to buy the confidential e-mails of peer-to-peer operator TorrentSpy.

That, in itself, is not illegal. Sleazy, perhaps, but not against the law. The MPAA, after all, is engaged in a holy war against P2P companies like TorrentSpy that allow users to download entire movies, sometimes legally and sometimes not. How the TorrentSpy e-mails landed in the MPAA's hands, however, is very much a question of legality.

The e-mails were obtained from disgruntled former TorrentSpy associate Rob Anderson, who hacked into the company's e-mail server and configured it to copy and forward all incoming and outgoing e-mail to his personal Google account. The MPAA justified this behavior by claiming that the hacker did not violate TorrentSpy's privacy, at least not technically.

Surprisingly, a district court agreed with the MPAA. Because the e-mails were stored on TorrentSpy's e-mail server for several milliseconds during transmission, the court ruled, they were not "intercepted" and the result was not a violation of the Federal Wiretap Act. This sort of muddled thinking dangerously undermines the statutory and constitutional privacy rights of every Internet user.

Not surprisingly, TorrentSpy has appealed the decision, and the EFF has filed a friend of the court brief on behalf of TorrentSpy.

"The district court's decision, if upheld, would have dangerous repercussions far beyond this single case," said Kevin Bankston, EFF's senior staff attorney. "That court opinion -- holding that the secret and unauthorized copying and forwarding of e-mails while they pass through an e-mail server is not an illegal interception of those e-mails -- threatens to wholly eviscerate federal privacy protections against Internet wiretapping."

More chillingly, Bankston noted, if the decision is allowed to stand, it will "authorize the government to conduct similar e-mail surveillance without getting a wiretapping order from a judge." There's enough of that already.

The 1968 Wiretap Act defines "intercept" as "the aural or other acquisition of the contents of any wire, electronic or oral communication through the use of any electronic, mechanical or other device." It seems pretty straightforward that the hacker intercepted TorrentSpy's e-mail (an electronics communication).

So what was Judge Florence-Marie Cooper thinking in August 2007 when she ruled in favor of the MPAA?

"Anderson did not stop or seize any of the messages that were forwarded to him," Cooper wrote in her decision. "Anderson's actions did not halt the transmission of the messages to their intended recipients. As such, under well-settled case law, as well as a reading of the statute and the ordinary meaning of the word 'intercept,' Anderson's acquisitions of the e-mails did not violate the Wiretap Act."

Just like that -- in a millisecond - Internet privacy rights have again come under serious threat. All for $15,000 and from a motion picture industry that, despite its protests to the contrary, is not seriously hurt by piracy. The film industry, it should not be forgotten, had a record box office year in 2007.

TrackBack

TrackBack

http://blogs.eweek.com/cgi-bin/mte/mt-tb.cgi/14555

Comments (4)

Alex Thomspon :

I think you are correct in saying that it would allow the govt to intercept email without a court order, but would not also the reverse be true, that I could intercept govt email quite legally - I think this ruling is neither in the interests of the govt or the public.

Bob :

Except that, if the government caught you actually reading that confidential email, they'd have to kill you.

TonyH :

As noted in your post:

"Anderson did not stop or seize any of the messages that were forwarded to him," Cooper wrote in her decision. "Anderson's actions did not halt the transmission of the messages to their intended recipients. As such, under well-settled case law, as well as a reading of the statute and the ordinary meaning of the word 'intercept,' Anderson's acquisitions of the e-mails did not violate the Wiretap Act."

This statement virtually guarantees that she will be reversed on appeal. A traditional wiretap neither stops nor results in "seizure" of the conversation being monitored. In the same way that a wiretap diverts or creates a copy of the communication being monitored, without knowledge of those communicating, Anderson's actions resulted in a parallel outcome - a copy of communication achieved without interfering with the original. By creating the rogue configuration on the TorrentSpy server, Anderson was, within the definition of the law, creating instructions - i.e., programming.

To me, the only question of law is whether a third party (MPAA) can benefit by the actions of Anderson if they did not actually ask him to do what he apparently did. Here the law is less clear.

Mike.D. :

So by this judge's thinking, it's okay for me to hack the MPAA's Email? No court order required, only enough technical expertise or hacking expertise to do it.

I also think we should tap this judge's Email using the same reasoning and rationale she used to make her decision.

With both of these "legal" taps in place, we could share their Email with all on the Internet.

Sounds like a plan to me!

Post a Comment

 
 


Advertisement
Advertisement